PayPal: database of 15.8 million accounts stolen?

Fraudsters don't seem to rest during the summer months. A post has appeared on a well-known online forum for trading compromised content, claiming that a database of approximately 15.8 million PayPal accounts, including email addresses and passwords in readable form, has been stolen. PayPal denies the allegations, but it's still worth being extra careful and changing your password.

Regardless of the reliability of the claim, there is a risk that attackers will reuse the obtained passwords on other sites (so-called “credential stuffing”) or that identity theft will occur. Already reproduced or older passwords can be dangerous if users use them on several different websites.

So what advice does ZBS give to PayPal platform users?

• Change your PayPal password, especially if you use it for other online services. Keep the password unique and strong.
• Enable two-factor authentication (2FA – for example, a code over the phone), which adds an extra layer of security.
• Check your account balance and transactions, and if you notice anything suspicious, notify your bank or savings bank and PayPal immediately.
• Use and regularly update antivirus programs on your devices.
• Do not open unknown or suspicious content you receive via email, as it may contain malware.

What else can you do to protect your data:

• Before entering personal or payment information, always check that the link starts with “https://” and has a lock icon – this means that the data is securely encrypted.
• Avoid public Wi-Fi networks when shopping or transferring important data. If you can, use a trusted VPN to protect your connection.